Security Engineer IV - API/Cloud Security

Edward D. Jones & Co., L.P.
St. Louis, United States of America
yesterday

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Senior

Job location

St. Louis, United States of America

Tech stack

PHP
Microsoft Windows
API
Agile Methodologies
Azure
Bash
Unix
Cloud Computing
Cloud Computing Security
Computer Security
Databases
Information Leak Prevention
Linux
DNS
Perl
Information Security Management
Intrusion Detection Systems
Python
Lightweight Directory Access Protocols (LDAP)
Open Web Application Security
Cloud Services
Secure Coding
Scripting (Bash/Python/Go/Ruby)
Enterprise Software Applications
IT Architecture
Software Security
Firewalls (Computer Science)
Integration Frameworks
Visual Basic Language
Vulnerability Analysis

Job description

Join our team as a Security Engineer IV and contribute to the safeguarding of our information system resources and assets. We're seeking a team player with a positive attitude, drive and the ability to collaborate closely with our security team. In this role, you'll be responsible for ensuring that our security systems align with Information Security policies and standards while supporting our firm's business objectives., * Perform administration of API Security, Cloud and SaaS Security Posture management, AI security tooling and other firm platforms as needed

  • Participate in troubleshooting efforts to resolve day to day issues
  • Involvement in Agile methodologies to build out our security platforms
  • Find gaps in security controls and be able to recommend possible resolutions
  • Participate in daily operational work that comes with large enterprise networks
  • For some functions, there may be requirements for on-call work outside normal business hours and scheduled tasks occurring outside business hours
  • Provide technical leadership and complete complex system level assignments
  • Design, implement, and support API security controls across enterprise applications, cloud services, and third-party integrations
  • Lead investigations and remediation efforts for API-related security incidents, vulnerabilities, and compliance findings
  • Analyze API traffic patterns and security telemetry to identify anomalous behavior, abuse, and potential attacks
  • Provide technical guidance and mentoring to junior engineers and security analysts on API security best practices and secure coding principles

Requirements

  • Bachelor's degree (preferred) in Computer Science, Management Information Systems, related field or related work experience
  • 5+ years of experience in cybersecurity, application security, API security, or related engineering disciplines
  • Knowledge and understanding of security systems, risks, concepts and terminology.
  • Hands on experience with the security aspects of critical technologies (e.g., Linux, UNIX, Proofpoint, Windows, Web, LDAP, DBMS, Network, Firewalls, IDS/IPS, Data Loss Prevention (DLP), API Security, DNS, Vulnerability Assessment Tools)
  • An intermediate to advanced understanding of at least one of the following environments; API Security, CSPM, SSPM or AI Security is highly preferred
  • An intermediate understanding of Azure Cloud environments, controls and architecture is preferred.
  • Comprehension of basic scripting languages (e.g., shell, PERL, Visual Basic, PHP, Python) is preferred.
  • Ability to diagnose security, network, and system issues
  • Understand infrastructure architecture - networks, security tools, operating systems and provides input to leaders about the impact of these components
  • Strong understanding of API security risks, including OWASP API Security Top 10 vulnerabilities and modern attack techniques
  • Ability to effectively communicate technical risks and remediation recommendations to both technical and non-technical stakeholders
  • Experience working with API Security tooling in containerized environments

Benefits & conditions

At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received.

Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones

Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones

About the company

Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500¹ company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report. ¹Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating.

Apply for this position